PatchTheCVE: itb-pimhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-36645: SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershhttps://patchthecve.com/cve/CVE-2023-36645.htmlhttps://patchthecve.com/cve/CVE-2023-36645.htmlWed, 17 Jun 2026 06:06:44 +0000CRITICAL 9.1: SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.CVE-2023-36644: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmationshttps://patchthecve.com/cve/CVE-2023-36644.htmlhttps://patchthecve.com/cve/CVE-2023-36644.htmlWed, 17 Jun 2026 06:06:44 +0000HIGH 7.5: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.CVE-2023-36643: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the onlhttps://patchthecve.com/cve/CVE-2023-36643.htmlhttps://patchthecve.com/cve/CVE-2023-36643.htmlWed, 17 Jun 2026 06:06:44 +0000HIGH 7.5: Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.